Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          DkzHGtosAq0S+hViU3pkL809/cbSKziNlyEYdU8xJO4=
Subject key identifier:   8C:27:70:96:92:F4:1C:CD:C0:50:DF:BD:D1:2F:78:A6:72:6F:A6:75
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1C22
Signing time:             Sat 18 Oct 2025 16:33:21 +0000
Manifest this update:     Sat 18 Oct 2025 16:33:21 +0000
Manifest next update:     Sat 25 Oct 2025 16:33:21 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: xCfQX9+LBmcorFsT4fEFnBHCWpvU1Qxw2XT39szQ67Q=)
                          2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=)
                          3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7236 (0x1c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Oct 18 16:33:21 2025 GMT
            Not After : Oct 25 16:33:21 2025 GMT
        Subject: CN=68f3c151-8672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:8c:9f:3a:38:16:21:55:ee:4e:88:28:01:
                    9f:a0:4b:76:28:18:68:49:bc:70:b7:bc:31:c4:fa:
                    54:67:1f:f2:c4:e2:c7:45:0e:49:68:34:65:bc:37:
                    6e:75:25:53:0a:cf:40:c4:33:28:d4:8e:97:a9:5a:
                    ce:b5:0d:96:c2:b7:52:68:ed:95:fa:cb:93:0a:ae:
                    e6:81:79:61:4a:6b:0e:52:da:47:43:78:e9:16:d4:
                    3c:4e:9f:68:ff:23:55:f2:35:6b:bf:a7:9a:a4:b6:
                    59:6b:8b:b1:7f:0a:b1:4b:0f:b9:30:8d:80:90:1d:
                    be:7c:2e:90:97:b0:ce:7c:07:d9:57:c0:c6:97:ed:
                    af:da:18:06:a2:6d:69:07:e2:82:fa:54:d6:97:ad:
                    b5:c8:90:e4:70:02:b3:ce:a4:d5:b2:03:97:be:ce:
                    2b:a0:d8:18:71:43:4f:be:c0:b7:86:bf:2a:8d:2a:
                    97:8e:fe:c3:d4:c9:f4:26:fa:3a:70:54:79:03:55:
                    73:4b:9a:3b:49:92:ec:33:c0:b1:2b:71:98:a7:cf:
                    b9:33:ed:1f:98:47:6d:0b:55:e1:0a:d0:c2:7d:bf:
                    d3:a4:84:54:02:19:6a:c9:4f:28:19:50:e8:47:e9:
                    80:2a:08:79:69:d1:b9:fb:f3:2a:6b:3d:10:22:4d:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:70:96:92:F4:1C:CD:C0:50:DF:BD:D1:2F:78:A6:72:6F:A6:75
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:7b:7e:f0:ab:c7:3e:dd:1f:31:2b:86:b5:af:ca:e3:d3:
         b9:44:b0:8e:67:9e:b1:3e:93:12:55:c2:d6:51:02:fb:53:60:
         de:76:47:d4:3e:70:cb:61:e1:42:af:4f:67:49:c6:3c:29:a8:
         ec:21:c6:f2:74:90:a6:59:d3:68:72:ad:a0:25:04:24:ac:f4:
         ed:50:ff:88:0d:ea:15:33:7a:16:a6:66:f9:b7:bf:2c:c4:cc:
         46:6e:d8:a3:88:30:9e:3c:03:b8:ca:64:9e:39:b9:1b:e1:0c:
         78:85:34:ea:6d:61:4c:da:51:d4:33:b5:75:5a:ee:43:df:67:
         d1:44:f7:ba:4e:da:e5:a3:f2:da:1a:2d:2c:57:4e:5d:67:59:
         3b:b4:d6:8c:59:53:8d:49:17:73:c9:ab:fa:61:ce:c8:ee:57:
         44:89:34:9c:02:26:8b:9e:53:3a:63:b4:7f:b6:10:63:dc:6b:
         5a:0a:85:51:2b:20:5c:54:b8:e1:98:16:fc:ca:45:27:c2:7e:
         73:f1:6c:df:7e:2d:6d:6b:da:4d:7e:16:ba:f2:a5:4a:ab:26:
         47:9e:41:2d:f3:ab:38:6d:4e:f8:68:29:3d:85:ae:b4:c0:e5:
         e6:1b:d6:62:2d:30:36:bd:c0:be:a9:40:ff:2c:59:d9:05:d7:
         a0:b7:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:21 2025 by rpki-client